intel software guard extensions (sgx) · 2020-01-21 · epc epcm application environment privileged...

Intel Software Guard Extensions (SGX)

Prashant Pandey (ppandey@cs.stonybrook.edu)Applied Algorithms Lab, Stony Brook University

Story boardüProblem StatementüAttack Surface and OverviewüProgramming environmentü Enclave Life-CycleüDeveloping with SGXü SGX usage models

Are compute devices trustworthy?

Basic Issue: Why aren’t compute devices trustworthy ?

App Code

Privileged Code

App Code

Protected Mode protects OS from app

Malicious App

Privileged Code

App Code

Bad Code

Attack

Apps not protected from privileged code attacks

Malicious App

Privileged Code

App CodeX

Bad Code

Apps not protected from privileged code attacks

Bad Code

Attack surface

App App App

Hardware

Attack Surface

Reduced attack surface with SGX

üApplication gains ability to defend its own secret

üMalware that subverts OS/VMM, BIOS, Drivers etc. cannot steal app secrets

ü Single application environment

App App App

Hardware

Attack Surface

SGX Programming Environment

App Code

App Data

Enclave (.so)

Enclave Code

TCS (*n)

Enclave Data

User Process Enclave

Enclave:üHas its own code and dataüProvides ConfidentialityüProvides IntegrityüHas controlled entry pointsü Supports multiple threadsüHas full access to app

memory

Intel SGX Technologyü At its root, Intel SGX is a set of new CPU instructions that

can be used by applications to set aside private regions of code and data

ü Allows app developers to protect sensitive data by rogue software running at higher privilege levels

ü Enable apps to preserve the confidentiality and integrity of sensitive code and data

SGX high-level HW/SW picture

Enclave Enclave

SGX User Runtime

SGX Module

Platform

ApplicationRuntime

OS Data StrHardware

HW Data Str

Page Tables

EPC EPCM

Application Environment

PrivilegedEnvironment

ExposedHardware

InstructionsEGETKEYEEXITEREPORTEENTERERESUME

InstructionsECREATE ETRACKEADD EWBEEXTEND ELDEINIT EPAEBLOCK EREMOVE

Life Cycle of EnclaveVirtual Address Space Physical Address Space

InvalidInvalidInvalid

Invalid

ECREATE

System Memory

Enclave

Invalid

ECREATE

System Memory

Enclave

Invalid

ECREATE

SECS Valid, ID

System Memory

Enclave

Invalid

ECREATE

SECS Valid, ID

Code/Data

System Memory

Enclave

Invalid

ECREATE

SECS Valid, ID

Code/Data

System Memory

Enclave

Invalid

ECREATE

SECS Valid, ID

Code/Data

System Memory

Valid, ID

Enclave

Invalid

ECREATE

SECS Valid, ID

Code/Data

System Memory

Valid, ID

Enclave

Invalid

ECREATE

SECS Valid, ID

Code/Data

System Memory

Valid, ID

Code/DataEnclave

Code/Data

Invalid

ECREATE

SECS Valid, ID

Code/Data

System Memory

Valid, ID

Code/Data

Valid, ID

Enclave

Code/Data

Invalid

ECREATE

SECS Valid, ID

Code/Data

System Memory

Valid, ID

Enclave

Code/Data

Invalid

ECREATE

SECS Valid, ID

Code/Data

System Memory

Valid, ID

EEXTEND

Enclave

Code/Data

Invalid

ECREATE

SECS Valid, ID

Code/Data

System Memory

Valid, ID

EEXTEND

Enclave

Code/Data

Invalid

ECREATE

SECS Valid, ID

Code/Data

System Memory

Valid, ID

Code/DataValid, ID

EEXTEND

Enclave

Code/Data

Invalid

ECREATE

SECS Valid, ID

Code/Data

System Memory

Valid, ID

EEXTENDEINITEnclave

Code/Data

Invalid

ECREATE

SECS Valid, ID

Code/Data

System Memory

Valid, ID

EEXTENDEINITEENTEREnclave

Code/Data

Invalid

ECREATE

SECS Valid, ID

Code/Data

System Memory

Valid, ID

Code/Data

Valid, ID

EEXTENDEINITEENTEREEXIT

Enclave

Code/Data

Invalid

ECREATE

System Memory

EADDEEXTENDEINITEENTEREEXITEREMOVE

Enclave

Invalid

ECREATE

System Memory

EADDEEXTENDEINITEENTEREEXITEREMOVE

Protection vs. Memory Snooping

ü Security perimeter is CPU package boundary

üData and code unencrypted inside CPU package

üData and code outside CPU package is encrypted and/or integrity checked

üExternal memory reads and bus snoops see only encrypted data

Developing with SGX

Intel SGX enabled CPU

Application

AppCode

Trusted

ProcessingComponent

GlueCodeSGXSDKSGXSDKGlueCode

ArchitecturalEnclave

ProcessingComponent

ArchitecturalEnclaveArchitecturalEnclave

Intel SGX Call Gates

App Code

App Data

Enclave (.so)

User Process

Ocalls Ecalls

Intel SGX advantages

• Intel SGX, provides an ability to create a secure enclave [a secure memory area] within a potentially compromised OS

• You can create an enclave with the desired code, then lock it down, measure the code there and if everything is fine, ask the processor to start executing the code

• A nice surprise is that SGX infrastructure no longer depends upon the TPM to perform the measurement

SGX Technical Summary

ü Provides any application the ability to keep a secretü Provide capability using new processor instructionsü Application can support multiple enclaves

ü Provides integrity and confidentiality ü Resists hardware attacks ü Prevent software access, including privileged software

ü Applications run within OS environmentü Low learning curve for application developersü Open to all developers**

ü Resources managed by system software

SGX usage models

ü Running a LibOS inside an enclave ü [https://www.usenix.org/system/files/conference/osdi14/osdi14-paper-baumann.pdf]

ü Running hadoop map-reduce jobs inside enclaveü [http://research.microsoft.com/apps/pubs/?id=210786]

ü Building an encrypted file system using SGX to protect against cold boot attacks and DMA attacksü [Not published yet]

ü Running privacy protected genomics workload inside enclaveü [Not published yet]

Referencesü http://software.intel.com/en-us/articles/innovative-instructions-and-

software-model-for-isolated-executionü http://software.intel.com/en-us/articles/innovative-technology-for-cpu-

based-attestation-and-sealingü http://software.intel.com/sites/default/files/article/413938/hasp-2013-

innovative-instructions-for-trusted-solutions.pdfü http://web.stanford.edu/class/ee380/Abstracts/150415-slides.pdfü AgoodreadtounderstandSGX:

http://theinvisiblethings.blogspot.com/2013/08/thoughts-on-intels-upcoming-software.html

intel software guard extensions (sgx) · 2020-01-21 · epc epcm application environment privileged...

Documents

submitting an eresume - united states coast guard ·...

jewish eenter: bulletinjewish k 'mn® community eenter:...

certificate of completion this is to certify that bruce...

eexit devicesxit devices sectionsection - lockwood · pdf...

eexit 18 hwy 101 middletonxit 18 hwy 101...

s e g h l g m l oo ff iicc aall ss ttrr ee mm pp t , b r i...

mrs. sony’s. gget to class before the bell rings - eenter...

gms - world economy s.l. · 2017-05-18 · je pr e st...

paci fi...cational maltus related to public schools....

once a marine commando of the elite snakeeaters. … - us...

anne rdesmas e: a experience eresume n wtact riassunto...

63rsudh t welch, ptui s&ers. - mycdl.org filevolume x, no....

air-ground! zeamwork on the western 3ront by eenter for air...